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have overtaken parts of the 
attached memorandum on 
"“Compartmentation." The 
conversation you and I had on 
this issue on Wednesday, 
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events. I do believe, however, 
it is worth your time to read 
this document. 
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MEMORANDUM FOR: Director of Central Intelligence 
VIA: Deputy Director of Central Intelligence 


FROM: John F. Blake 
Deputy Director for Administration 


SUBJECT: Compartmentation 


1. (AIUO) Action Requested: None; for your information 
only. I have reviewed your memorandum on this subject and will 
attempt to provide you with a perspective on where we now 
appear to stand in the compartmentation arena. 


2. (C) Background: ommented, in effect, 25X1A 
that there were too many the compartmentation 


pot and that we suffered from a lack of central management and 
common standards. He focused on the fact that collectors, with 
their own vested interests, were establishing compartments and 
writing their own implementation rules. In the past year we 
have seen two steps that, hopefully, will take us a long way 
toward regularizing that situation. In June 1978 DCID 1/19 
established uniform procedures for the handling of Sensitive 
Compartmented Information (SCI). Secondly, a proposed DCID on 
compartmentation is currently being floated with the NFIB 
members. When passed it will, in keeping with your desires, 
establish the DCI Security Committee as the “honest broker" who 
can recommend te you when compartments should be created, con- 
tinued or closed out. 


3. {(U) Executive Order 12065 decrees that all special 
access programs which involve sources and methods must be 
approved in writing by you. Benchmarks which must be satisfied 
to qualify for compartmentation status include: a) the normal 
management and safeguarding procedures are not sufficient to 
limit need-to-know or access, b) the number of persons who will 
need access will be reasonably small and commensurate with the 
objective of providing extra protection for the information 
involved, and c) the special access controls balance the need to 
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: protect the information against the full spectrum of needs 

to use the information. All such programs must be reviewed 
regularly and will automatically terminate in five years 
unless fully rejustified. Additionally, all extant special 25X1A 
access programs must be revalidated prior to 1 June 1979. 


4. (C) The DCI Security Committee has an initiative 

underway with its current review of the NRP Compartmentation 
Review. This review, just getting off the ground, will, of 
course, review the General Tighe concern over use of aaa 

25X1A project names in the TK world, but_will use this exercise 45 
its first attempt to revalidate MEE Projects and the systen 
itself as special access programs, using as a baseline the 
standards imposed by the Executive Order. 


§, (C) Additionally, the DCI Security Committee has 
received recent confirmation from Collection Tasking that they 
are ready to start the dialogue on determining what space 
preeen. can be decompartmented. As we develop what SIGINT and 
COMIREX feel can be taken out from special system protection 
we would propose to confer with intelligence consumers to test 
the adequacy and completeness of the committees' judgments. We 
believe the resultant product of this joint effort will help te 
satisfy the balance required of customer needs versus collection 
sensitivities, fulfill the charge of Presidential Directive-37 
to selectively relax space product controls and, as a bonus, 
lay firm foundations for the later revalidation program of the 
COMINT and TALENT-KEYHOLE special access programs. 


6. (U) You also noted that you hoped that rules would be 
established to ensure that you are kept posted of bigot lists. 
We are preparing a memorandum on the subject of bigot lists for 
you as a result of our review of the DDO “Blue Border” documents. 
In it you will find that we argue fer compartmentation only for 
sensitive activities which involve a relatively greater volume 
of activity and personnel. The point expressed is that, if any 
activity is quite small and highly sensitive, it can be provided 
better protection through a bigot list than by formally compart- 
menting it. In those cases we believe security is better served 
if the activity manager, whether it be the DDO, CI Staff, or a 
Department of Defense entity, deals directly with you on the 
management of the bigot list approach with no centralized system 
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management or list of cleared personnel being maintained by 
the DCI Security Committee or Office of Security/Compartmented 
Information Branch. An instruction will be prepared indi- 
cating your interest in personally monitoring “bigot list” 


activity. 
oof Teer Baek 
John F. Blake 
Distribution: 
Original - DCI 
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MEMORANDUM FOR: Deputy Director for Administration 
FROM: Director of Central Intelligence 
SUBJECT: Compartmentation 


25X1A 


1. Further to the conversation you, ee) and I had 
25X1A on security and compartmentation, I have just reviewed a memo of 
last September from just before he left the Security 


Committee ("Community Security Needs and Problems," 29 September 
1977, SECOM-D-282). In it he had the following paragraph: 


"The Intelligence Community's special security control 
systems are conspicuous for their lack of central management 
and common standards. The perception of abuse in this area 
(whether or not well founded) has prompted pleas for change 
from many Community agencies. But, we are just now beginning 
to take tentative steps towards some sort of standardized 
procedures. A basic problem is that there are too many 
Community components involved in the subject. Another funda- 
mental problem, and the one that may well cause the most 
suspicion on the part of consumers, is that the collectors who 
argue the need for compartments to begin with are also the 
ones who write the implementation rules, with their programs 
and procedures subject effectually only to review by themselves. 
Current approaches to the subject favor those with a vested 
interest in the status quo. Arguments are often made for the 
continuation of a system not so much because it is currently jus- 
tified, but because of history. The COMINT compartment, for 
example, is very much in need of thorough review and revision 
to bring it into line with 1977 circumstances, It 
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y Classification provides, tor the first 
time, national level standards for compartments, and requires 
that all existing ones be measured against those standards and 
continued only where they are satisfied. Under those standards, 
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the DCI must personally approve all compartments in writing. 
I believe he must be able to look to a single Community 
focal point to coordinate the varying inputs he will need 

to judge the appropriateness of a compartment. Collectors 
obviously need to be able to argue their case for protection. 
Consumers need to be able to argue their case on utility of 
data. Someone needs to assess proposed systems and advise 
whether the desired security objectives can reasonably be 
satisfied in the real world. Then, there needs to be a 
Community focal point to manage the approved compartments by 
keeping track of authorized accesses and fielding complaints 


and suggestions about programs." 


2. 


If I understand it, the Security Committee is now working on 


implementing directives for the new security order which will move 

in the directions was talking about here. Essentially, I hope 
that I will confirm or cancel existing compartmentation, possibly 
setting up new compartments and establishing rules to ensure that I'm 
kept posted of bigot lists, etc., that are created outside the 
compartmentation area. Is that correct, and are we going to take care 
of these points that J raised? 


STANSFIELD TURNER 


cc: Deputy Director for 
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29 September 1977 
25X1A 


MEMORANDUM FOR: Acting Deputy to the DCI. for the “a 
Intelligence Community . 


% 
‘ ee net) 
FROM I cr we 
airman +s 
SUBJECT : Community Security Needs and Problems (U) 


1. (FOUO) As I leave the chairmanship of the DCI Security Committee, 
I would like to share some of my thoughts and conclusions on Intelligence 
Community security needs and problems. The needs as I see them focus on 
organization, management, and resources dedicated to Community security 
matters. 


2. (U) Some particularly significant problems that I see needing 
effective resolution are: 


a. (FOUOQ) Personnel Security Standards. By any reasonable 
test, persons throughout the government (and industry) should meet 
essentially the same standards for access to intelligence infor- 
mation at the same level of classification. The standards, however, 
vary widely. CIA has very stringent ones for its employees. Yet, 
CIA-generated intelligence is disseminated widely to Defense, State, 
and other agencies using lesser standards. Defense, for example, 
grants a Secret clearance on the basis of a non-derogatory National 
Agency Check, and a Top Secret clearance on the same basis if the 
service member has ten or more years satisfactory service. Defense 
permits industry to grant a Confidential clearance without any checks 
at all. I view these as essentially meaningless--they do not affirm 
claimed identity, and they do not show any positive indicators of 
loyalty and trustworthiness. These varying standards are based on 
different concepts of what is a necessary and proper basis for 
granting clearances. A Security Committee working group is con- 
ue a study to try to detertime What 1S necessary and desirable 

@ results, While primarily applicable to 
2 DOSSTDTe"PeTT STON of DCID 1/14, should give us a good basis for 
proposing better standards throughout the government for access to 
Secret and Top Secret information. But, that is easier said than 
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SUBJECT: Communtiy Security Needs and Problems 


25X1A 


25X6 


done. A fairly well-solidified body of opinion more concerned 

with privacy considerations and due process than with good security 
coalesced in recent years behind the proposed revision of .£.0. 10450, 
which sets personnel security standards for Government employees 
generally. I do not believe the Intelligence Community will be able 
to make its views prevail in this arena unless it can speak with a 
Single voice on the subject and be supported at the policy level. 


b. (C) Computer Security. I am quite concerned about the 
security of intelligence information, particularly that which is 
compartmented, in shared ADP systems accessible by persons with 
varying levels of security clearances. The multi-level mode of 
operation of such systems relies too much in my judgment on every- 
thing working exactly as it should. Computer software cannot give 
positive assurances that boundaries between different classification 
and control levels of stored/processed data cannot be violated. The 


ustTness expertence wi raud and embezzfemen roug systems 
suggests that the perpetrators are caught more by accident than by 
effective security precautions built into the equipment and its 
software. I believe there needs to be a greater concentration of 
Community effort in this area, and a single Community focal point to 
identify specific problems and devise coordinated policy to correct 
them. 


c. (C) Compartmentation. The Intelligence Community's special 
security control systems are conspicuous for their lack of central 
management and common standards. The perception of abuse in this 
area (whether or not well tounded) has prompted pleas for change from 
many Community agencies. But, we are just now beginning to take 
tentative steps towards some sort of standardized procedures. A 
basic problem is that there are too many Community components involved 
in the subject. Another fundamental problem, and the one that may well 
cause the most suspicion on the part of consumers, is that the collec- 
tors who rque the need for compartments to begin with are also the 


a Jementatiog rules, wit elr programs and 
procedures subgect effectually Oty bow reuleu by Lnelsel isi Current 
approaches to the subject favor those with a vested interest in the 
status quo. Arguments are often made for the continuation of a system 
not so much because it is currently justified, but because of history. 
The COMINT. compartment, for example, is very much in need of thorough 
review and revision to bring it into line with 1977 circumstances. 
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The new Executive Order on security 
oe classification provides, for the first time, national level standards 
for compartments, and requires that all existing ones be measured 
against those standards and continued only where they are satisfied. 
Under those standards, the DCI must personally approve all. compart- 
ments in writing, I believe he must be able to look to a single 
Community focal point to coordinate the varying inputs he will need 
to judge the appropriateness of a compartment. Collectors obviously 
need to be able to argue their case for protection. Consumers need 
to be able to argue their case on utility of data. Someone needs to 
assess proposed systems and advise whether the desired security objec- 
tives can reasonably be satisfied in the real ee Then, there 


r 


needs be a ere poral 001 nt_to manage. the approved compart- 
rents. by kee) ized.accesses and a dfielding ng comptaints 


a Polen: I believe the Security Committee as a staff support element 
for the DCI is the logical focal point for the Community in all security 
matters. Its responsibility for such should be made explicit through charter 
revision, which should simultaneously see that the charters of collection 
committees are changed to state that their security responsibilities are 

; advisory to the Security Committee. ‘These changes would have to be accom- 
panied by resource reallocations to give the Security Committee enough 
manpower to enable it to support the DCI's security responsibilities effect- 

_ ively. Current manpower authorizations.esseotially limit_us toa collegial, 
role, relying on Community agencies to provide personnel on an additional 
‘duty basis to chair functional subcommittees and working groups, and sometimes 
restricting us to the painfully slow evolution of a Community consensus 
before a policy can be developed or revised. With adequate manpower, we 
can serve as a meaningful support component for the DCI and the Community. 
This would involve a capability: (1) to chair with our own people the — 
requisite subcommittees (compartmentation, computer security, etc.) and 
working groups (e.g., personnel security standards) and thereby control 
timetables and agenda; (2) to monitor compliance with DCI security directives 
throughout the Community; and (3) to assist Community agencies in the imple- 
mentation of security policy. I believe that failure to establish and 
properly staff a Community focal point for security could result in outside 
entities seeking to fill the vacuum. Community acceptance of an cooperation 
with any coordinating security bodywill be strongly influenced by the per- 
ception of independence of such body from any single Community agency. 
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SUBJECT: Community Security Needs and Problems 


4. (U) The above comments notwithstanding, the Security Committee 
has made some significant accomplishments. However, much remains to be 
done. 


25X1A 
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